Researchers Highlight Vulnerabilities in GEO Satellite Communications

According to Cointelegraph, a team of researchers from the University of Maryland and the University of California has uncovered significant vulnerabilities in geosynchronous (GEO) satellite communications. These satellites, which are crucial for transmitting internet and phone data to remote areas, are reportedly broadcasting sensitive information that can be intercepted with equipment costing around $600. The researchers published their findings on Monday, revealing that a substantial amount of unencrypted data is being transmitted across the satellite network in plaintext. This includes encryption keys for cellular communications, citizens' SMS, and even data related to military systems and critical infrastructure. The research team conducted their study by installing a consumer-grade satellite dish on the roof of a university building in San Diego, observing 39 GEO satellites. They noted that data from a single satellite transponder could be visible from an area covering up to 40% of the Earth's surface. The researchers emphasized the ease with which this data can be passively intercepted, highlighting the need for improved encryption practices. They recommend that users protect themselves by utilizing services like VPNs, which conceal IP addresses and encrypt data, and by using end-to-end encrypted messaging apps such as Signal or Telegram. During their investigation, the researchers informed several major satellite communication providers about the vulnerabilities. Some providers have reportedly taken steps to address the issue, although the researchers noted that there is no single entity responsible for encrypting GEO satellite communications. They faced challenges in identifying the responsible parties and disclosing the vulnerabilities. While they verified that fixes had been implemented by networks used by T-Mobile, Walmart, and KPU, they are withholding information about other affected systems due to ongoing disclosures. The researchers identified several reasons for the lack of encryption in satellite communications, including the high costs associated with encryption hardware and license fees, particularly for remote and off-grid receivers. Additionally, encryption can complicate network troubleshooting and affect the reliability of emergency services. The study focused on GEO satellite systems, which remain in fixed positions, but did not examine low-Earth orbit systems like Elon Musk's Starlink, as this would require more complex receiving hardware. The researchers believe these links are encrypted, although they have not independently verified this.